Production checklist
Vercel production checklist: 6 checks before launch
6 checks for running Vercel in production: 3 should-dos and 3 good-to-haves. Each one says why it matters, how to verify it and where the docs are.
Updated . Every check links the vendor’s own docs.
Should do (3)
Protect preview deployments
Preview URLs are public by default and often talk to real data.
How to verify
Project → Settings → Deployment Protection: Vercel Authentication (or Password Protection) is on for preview deployments. Open a preview URL in a private window; it should ask you to sign in.
Scope environment variables per environment
Keep production secrets out of Preview and Development builds.
Verify from the command line
List the project’s variables; production secrets should be scoped to Production only, not Preview or Development.
vercel env ls
Turn on two-factor authentication for everyone on the team
A stolen Vercel login can read every environment variable and redeploy production.
How to verify
Each member turns on two-factor authentication in their account settings; check the team’s Members list before launch.
Good to have (3)
Set spend management limits
A traffic spike or a loop in a function shouldn’t produce a surprise bill.
How to verify
Team Settings → Billing → Spend Management: an on-demand budget is set with notifications, and Pause Production Deployments is on if you want a hard stop. (Pro and Enterprise plans.)
Review the Vercel Firewall and add rate limits to hot routes
Blocks abusive traffic before it reaches your functions.
How to verify
Open the project’s Firewall tab: check the traffic view and that login, sign-up and AI routes have a rate limit rule.
Go through Vercel’s production checklist
Covers caching, observability, security headers and operational settings before launch.
How to verify
Work through each section of Vercel’s checklist and note which items apply to your project.
Get the checklist for your whole stack
Design your stack or map your repo in StackPrism, and the Improve panel lists the checks for every technology on it and keeps track of what you’ve done. Building with an AI app builder? Start with the vibe coding checklist.